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1- INTRODUCTION 

1.1 The Architectural Definition is the first of three 
levels of definition of IPL as described 'in the IPL 
System Design Plan document. Each level will define 
IPL in more detail. The Architectural Definition 
defines: 
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Inter-processor connection 

Virtual memory mechanism 

Data formats 

Direction to be followed in defining the instruction 

set- 



1-2 The objective of the Advanced Systems Laboratory is to 
define a computer systems product line which spans the 



lease price range of 
of from onG tenth of 



Z jGK/ ronch and performance range 

Gu to oloven times a LLGD. 



1.3 The definition of compatibility to be achieved in IPL was 
defined by the joint NCR/CDC task force in May-i 1^73- The 
required level of compatibility is level IV with level V 
desired. Level V is to be pursued only if the result does 
not .compromise too severely the cost/performance of the 
line* 



Level IV - This level established the minimum requirements 
which must be satisfied to have an integrated product line. 
These requirements are stated as." 

standard data representation on cards and 

portability of higher level language source 

luding software writer's language. -CNoten 

s who write model dependent code cannot be 

ked.} 

ta formats -{internal and external}- 

sk recording formats- 

ta communications protocol. 

erating system at the source leveln providing 

organizations t access methodsn labeling con- 

etc . 
channel. 

stem console design- 
t virtual storage definition. 

level includes Level IV plus a bit-compatible 
instruction set- 
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IPL CONFIGURATI ON 

2.1 The primary aspect of configuration that will be addressed here 
is the relationship between the multiple processors typical of 
the IPL-i and central memory. Further details relating to 
channel configuration and peripheral equipment support will be 
supplied at a later stage. 

2.2 The basic configuration of the IPL is one where a central memory 
is accessed via a common addressing scheme by multiple processors 
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Central memory will not 
be the o nly communication 
path for the individual 
processors. Howevern the 
precise connections are 
still being developed and 
will be included in this 
specification at a later 
date • 



2.3 



The addressing scheme employed is based on a virtual memory 
mechanism which is described fully in the next section. That 
mechanism forms the basis for the protection and security schemes 
devised for the IPLt and by ensuring that all memory references 
are via this mechanismn system- wide protection and security are 
guaranteed. 

Implied in the configuration is a single operating system and a 
single instruction set. The individual processors will not 
necessarily be identical-, but with the exception of some special 
I/O commands they will all be capable of executing the same* 
processes. 
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Some processors will have the ability to communicate with 
peripheral devices. The operating system will recognize this 
unique feature and will assign work accordingly. The general 
configuration is shown below: 
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2-M The IPL will embrace a range of processors of differing power. 

Total system power may be increased by utilizing a more powerful 
processor or by adding processors of like power. Since all IPL 
models require an I/O capability it is the less powerful pro- 
cessors representing the low-end of the line that will satisfy 
this need. A minimum low-end configuration will typically con- 
tain a single processor: ^S 
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More powerful systems t; ill typically have two processors-, one 
of which will have the I/O capability. 



EN 5 Depending on the power of a particular processor n certain oper- 
ations may be optimised. For example-, at the low-c-nd BI/P in- 
structions may be executed more efficiently than their counter- 
partsat the high-end. . Nevertheless n ba:.,ic I/O commands exceptedn 
all processors can execute all code. This fact-i which enables 
the configurations outlined herei also provides for parallel 
redundancy and all the benefits which are derived from it. 



E?.b The instruction set to be used for the IPL is discussed in 

Section S-. and reliability issues will be the subject of future 
sections or appendices. 




3. VIRTUAL MEMORY 



3-1 Overview 
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In generaln users refer to a segment and a byte 
offset within a segment- Pages are transparent 
to the user in much the same way that banks are 
transparent to users in real memory. 

3-1- 2 Having established an environment in which many 
users may share code and data it is necessary to. 
provide suitable protection mechanisms to insulate 
the individual users from each other- Two techniques 
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are used to ' guarantee? interprocess and intraprocess 
protection. The first is rchicved via the segment 
attributes which have already been mentionedn the 
second is achieved by logically organizing the en- 
tire information store within a series of concentric 
rings corresponding to different states the machine 
operates in- Ring zero is the most priveleged ring. 
In generaln a procedure executing in a particular ring 
has access to code and data in that ring and in any 
ring outside -[greater ring number} its own. Access to 
inner rings can only be made through carefully con- 
trolled entry'points or gates. 

3 • 2 Memory Address Formation 

3.2-1 This section specifies the logical algorithms used 

for translating the IPL process virtual address -£PVA> 
into a real address. The formation of the PVA is a 
function of the instruction repertoire and how the 
various fields of the instruction are used to form 
an effective address. 

3.2.2 The PVA is mapped into a bH-bit container. Three 
fields are used during address translation. These 
are the ring number -CRNIt the segment number -CSEGJ 
and the byte number -CBN>. The format of the PVA is 
shown below: 
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I is the invalid flag andi when set -CI = 1> denotes an 
invalid pointer. 
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3.2-2.1 ThG rin c number is a four bit field used in 
access validation and is discussed in the 
next sec t ion . 

3.2-2.2 The segment number is a 12 -bit field that is 
used to access the segment descriptor. In 
effect this field is an index into the seg- 
ment descriptor table. Segment numbers are 
assigned as needed by the operating system. 
Each process in the system has its own virtual 
address space and can. have up to ■ MQTb segments 
described in that ■ address space. Some of the 
segments will be pre-assigned to system code 
and tables that are in a privileged machine 
state {typically ring zero}- Other segments 
will contain the code and data of the users 
application. 

3-2-2.3 The byte num ber specifies the location to be 

accessed within a segment and is made up of three 
parts 1 . the page number -CPfOn the page offset 
•CPC>-> and the paragraph number- 

3- 2-2-3-1 The-; page numbe r field is variable in 
•size and ranges from 15 to 23 bits- 
The size is fixed on a per install- 
ation basis and will not vary while 
the system is running. The actual 
size of the page number field is 
contained as a mask in the page size 
mask register. 

3.2-2.3-1-1 The p age size mask r egi ster 
is set so that it can be 
used against bits MS through 
S5 of the PVA to separate 
out the page number and the 
page offset. Bit positions 
33 through M7 of the PVA 
are automatically included 
in the page numbern and bits 
St. through L>3 are automat- 
ically included in the page 
offset. 



3-2-2-3.1.2 



The page si z e mask is fi-bits 
long and is always a log- 
ical prefix vector with 
■Cfi-UJ ones followed by U 
zeros where the page size 
is 2 u x paragraph size 
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For ex- 
ample-. U = 2 yields a page size 
of 2 Cj + 'i> = ippLj bytes- The 

corresponding page size mask 
would be set to: 



"12,111100". 

3-2.2.3.2 The n ros offset, is the displacement of the 
location to be accessed relative to the 
page boundary. This field varies with the 
page size and ranges from 6 to lb bits- 

3*2.2.3.3 The paragraph number is specified as the 
23-bit v"alue"contained in bits 33 through 
SS of the PVA. It is used both to validate 
against trying to access beyond the defined 
length of a segmenti and to allow a segment 
allocation unit that is smaller than a page 

3-2-2. M The formation of the page number and the page offset 
from the byte number and the page size mask is illus- 
trated below: 
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3-2.3 Memor y T a b l_o_s •- Two m o : : o r y contain o d tables a r^ n us e d to r.r. ■ n s i .:: 
the PVA in co a real address. Those ocq the- nrocn sr. V y - ■_ t:;b. 
and the svston n ,:. r p J; ; ;. h 1 c-^ They are specified with r-. .1 ,,;,L!rcs 
in special programmable registers. The registers car only be 
manipulated by privileged routines of the operating system. 



3 « E . 3 • 1 The process g e n n e n t tab 1 e is specified by tuo 
the segment table address -CSTA> and the seamen 
length {STL}. The STA is the first real addre 
first entry of the process segment table. Eac 
til-bits long and is accessed by indexing the S 
the appropriate segment number. The segment t 
indicates the number "of usable entries in the 
table. The segment number to be used as an in 
be less than or equal to the value of the STL. 
format of the segment table entries -{segment d 
is shown below: 
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The process segment table entries are used primarily 
to validate access. They are also used to convert the 
PVA to a system virtual address {SVA}n by substituting 
a lb-bit active segment identifier for the IE-bit pro- 
cess segment number. The segment table entry is known 
as a segment descriptor. The formation of the SVA is 
illustrated: 
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3-2.3-1.1 The active segment identifier -CASID> is a software supplied value 
that relates the process' segment number to one of a global set 
of segments act ive in the system. Two processes which are sharing 
a segment may use different segment numbers to address the seg- 
ment but will have the same ASID. The ASH) is substituted for 
the segment number in the PVA before the system page table is 
accessed. 

3-2. 3-1-2 The kU Ri and X flags indicate the type of access that is per- 
mitted to the segment- These quantities! the ring numbers R0- 
R3 and the call limit -£CL> are. discussed more fully in the next 
section. 

3- 2- 3- 1.3 The m a x i m urn paragr * n h r v. m b a r {flPGNI is used to ensure that the 
byte number from the PVA does not reference beyond the end of 
the segment. The PGN must not be greater than the maximum 
paragraph number of the segment as specified in the descriptor- 

3-2-3-1- M The inva lid flag •£ !> indicates whether the segment descriptor 

contains valid information. If a process is removed from memory 
and placed on secondary storage'n its segments are considered to 
be no longer active and the ASID is released. Hencen when the 
process returns to memory the entries in the segment table are no 
longer correct and are marked invalid- As each segment is used 
a new value for the ASID is supplied. Attempting to use a seg- 
ment descriptor with an invalid bit set causes a tVap so that 
the operating system can make the segment descriptor valid. 

3. 2-3.1.5 The direct flag -CD> is used to indicate direct addressing of 

the segment. This is a special mode of operation that reduces 
fragmentation of real memory when several segments of less than 
one page in length can be grouped together. The address trans- 
lation mechanism for the direct address mode proceeds as follows: 

•Ci> Zeros are placed in the paragraph portion of the segment/ 
page identifier. That isn the page number is forced to 
zero. 

■Cii> The"physical page address" is recognized as the segment 
relocation address and is added to the 31-bit physical 
memory address- 

This process is illustrated as follows: 
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3-2-3-2 The system page ta ble is specified by two values: the page table 
address -CPTA> and" the page table length -CPTL>. The -page table 
address is the real address of the first entry of the system page 
table* Each entry is bM-bits long* The desired entry in the table 
is located with a combination of indexing and linear searching. The 
page table length is a mask that is used to force the index used to 
access-the page table to be modulo the size of the table- The table 
size is a function of real memory size and the page sizGi and is a 
multiple of the number of page frames in real memory - usually 2-H 
times the number of available page frames. 

3-2.3.2.1 The system page table entries are used to locate the 
proper page frame to be accessed and record usage of 
the page frame- Their format is illustrated below: 
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3-H-3-3 The real a ddress is formed by adding the real paragraph address 
and the SVA byte offset. 
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3-2-3- 1 4 The entire address formation -[excluding access validation} is 
described by the following flow chart: • 
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The page table contains one entry for each frame of real memory. 
The entries are placed in the table according to a hash index 
that is generated fron the SVA- Since many SVA's will hash to 
the same index it is necessary to specify the algorithm to be 
used to continue searching the table- This is a straight linear 
search. 



3-2.3-2-2 The pan e ident ificatio n {PA6EI D1 consists of the ASID and the 
page number derived from the PVA. It is used to identify the 
SVA to be translated by the particular entry. 

3.2.3.2.3 The real paragrap h address -CRPGA3- specifies the 25b byte boundary 
in real memory at which this section of the SVA is mapped- Be- 
cause of the paragraph size allocation unit-, the final real ad- 
dress should be formed by addition of the real paragraph address 
and the SVA byte offset- The formation of these quantities is 
diagrammed- 
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3«2«3«2« l: } The used-CUI and modified -CM> flags indicate whether the page 
table entry has been used for address translationn and when 
usedn if the real memory location was modified- 

3-2.3-2-S The T-f lag is used as a lock-out. When set this flag indicates 
that the page table entry cannot be used by the CPU for address 
translation because the block is being modified by I/O- 

3-2-3. 2-b The control -CO flag controls the search of the page table for 
the proper SVA. If C is not seti then the block of SVA space 
is not in real memory and a page fault is generated- 
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3.3 PROTECTION MECHANISM 
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3.3.1 Two mechanisms are used in the IPL for controlling access to 
a segment. Firstn when a user creates a segment he indicates 
the type of access other users may have to that segment. The 
options of road-, write and execute are denoted by individual 
flags in the segment descriptor. The W -flag must be set if 
the segment is to be modified. The JR-fl_L.9. must be set if 
data is to be fetched from the segment. The X - f 1 a g must be 
set if the segment contains executable code and constants. 



3- 3*2 The ability to grant access rights to a particu 
is not sufficient control and that mechanism i 
by a technique governing intra-process control. 
nique is an extension of the common two state -C 
and user state} machines. The IPL may operate 
sixteen states. These states arQ rings of prot 
generaln segments in the same ring have access 
limited only by their prescribed access modes. 
segments in lower-numbered rings have unlimited 
segments in high-numbered ringsi subject to the 
of those segments. 
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3.3.3 By definition! passing control outwards -Cto a greater ring 
number} from a segment is legal- However-, passing control 
inwards -Cto a smaller ring number} is carefully controlled-* 
and is achieved by providing the callee. with a gate through 
which the caller must pass- The most common example of this 
process occurs when a user calls on the operating system to 
perform a task. 
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the execute bracket {R1t R2> and gate bracket- 

3.3.5 The concept of ring brackets is extended to readn and urite 
protection. A process must be executing within the read or 
write bracket of 3 segment.! and appropriate access must have 
been granted for their operations to be executed- The complete 
set of conditions for readingn writing and executing a segment 
are given below. 



3 • 3 • S . 1 Urite A ccess 

RD '< P-RN 
PVA-RN'<R1 

3-3-S.E Read Access 



P-RN is the current ring 
of execution. 



R= 1 

RD r < P.RN 

PVA.RN't RE 

3«3.5.3 Execute Access 



X= 1 

Rl ^ PVA.RN ^ RE 

3-3-t. When a procedure makes a call on another procedure executing 
in an inner ringn the right to make the call must first be 
validatedn and the proper use of the gate must be checked. 
The authority to make the call has been given to the caller 
if s 



3.3.7 
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Having validated the right of the caller to make the calln 
the entry address must be verified. This is done by com- 
paring the CL field of the descriptor with the PVA-BN-i to 
ensure that the entry is via the appropriate transfer vector 
If the address is within range of the transfer vectorn the 
gate is allowed. In this case the current ring of execution 
is set to RE. Execution now proceeds as normal. 

To ensure protection when returning from an outward calln 
outward calls are trapped by the operating system which 
then simulates the CALL operation. In this case the current 
ring of execution is set to Rl. 
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M. Pi FORMATS 



M-l The data formats supported by the IPL ars diagrammed below: 
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DATA FORMATS 



la 



M.S An 6-bit unit of information is 'fundamental to most of these data 

formats. The location of a stored field is specified by the address 
of the leftmost byte of the field. Variable-length fields may start 
on any byte locationn but a fixed-length field of M- or S-bytes must 
have an address that is a multiple of M or fli respectively. 

M.3 Alpha-numeric data is carried either in ASCII or in EBCDICn which 
codes are shown on the following page: 
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Null/Idle 
Start of heading 
Start of text 
End of text 
End of transmission 
Enquiry 
Acknowledge 

Audible, or attention signal 
Backspace 

Horizontal tab » 
Line feed 
Vertical tab 
Form feed 
Carriage return 
Shift out 
Shift in 
Data link escape 
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DCl device control 

DC2 Device control 

DC3 Device "control 

DC H Device control (stop) 

NAK Negative acknowledge 

SYN . Synchronous idle 

ETB End of transmission block 

CAN Cancel 

EM End of medium 

SUB Start of special sequence 

ESC Escape 

FS File separator 

GS Group separator 

RS Record separator 

US Unit separator 

SP Space 

DEL Delete 






EIGHT-BIT REPRESENTATION FOR CODED INFORMATION (ASCII) 
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0000 
C001 

0010 
0011 
0100 
0101 
0110 
0111 
1000 
1GG1 
1010 
1011 
1100 
1101 
HID 

1111 



BIT POSITIONS - 01 

; 00 



00 


01 


■10 


11 


nul 


DLE 


DS 




SOH 


DC1 


SOS 




STX 


DC2 


FS 


SYfl 


ETX 


Til 






PF 


RES 


BYP 


PfJ 


HT 


ML 


IF 


RS 


LC 


, 


ECS 


i:c 


DEL 


IL 


PRE 


EOT 




CAN 








fh 






rr-;*; 


<"r 


sn 




VT 


CUl 


CU2 


CU3 


FF 


IFS 




DC4 


CR 


IGS 


E\'0 


NAK 


SO 


IRS 


ACK 




SI 


IUS 


BEL 


sua 



N / 

00 



,01 



01 



10 



— ^ y 

11 00 



-10 ^ 



SP 


& 














































































i 


j 




. 


. 


£ 


, 


jr . 


< 


* 


•'■ 


© 


■c 


> 


_ 


' 


+ 


T 




= ■ 


1 


— t 




n 



01 



10 



"\ s 



11 














a 


J 






b 


k 


s 




c 


1 


t 




d 


m 


u 




e 


n 


V 




f 





w 




g 


P 


X 




h 


q 


y 




i 


r 


2 





















































■\ 



00 


01 


10 


11 






V 





A 


J 




1 


B 


K 


s 


2 


C 


L 


T 


2 


D 


n 


U 


4 


E 


fi 


V 


i 


F 





! • 


t 


G 


p 


x 


? 


H 


Q 


v 


i 


I 


R 


z 








! 


j 


1 




i 






1 






i 









ACK Acknowledge 

BEL Bell 

8S Backspace 

6YP Bypass 

CAN Cancel 

CC Cursor Control 

CR Carriage Return 

CU Customer Use 1 

CUB Customer Use H 

CU3 Customer Use 3 

DO Device Control 1 

DC2 Device Control 2 

DCf Device Control H 



DEL Delete IGS 

DLE Data Link Escape IL 

DS Digit Select IRS 

Ed End of Medium IUS 

EN<2 Enquiry • LC 

EOT End of Transmission LF 

ESC Escape NAK 

ETB End of Transmission 31ock NL 

ETX End of Text NUL 

FF Form Feed PF 

•FS Field Separator PN 

HT Horizontal Tab RES 

IFS Interchange File Separator RS 



Interchange Croup Separator 

Idle 

Interchange Record Separator 

Interchange Unit Separator 

Lower Case 

Line Feed 

Negative Acknoulege 

New Line 

Null 

Punch O^f 

Punch On 

Restore 

Reader Stop 



SI 


Shift In 


sn 


Set Dode 


srni 


Start Manual Message 


so 


Shift Out 


SOH 


Start of Heading 


SOS 


Start of Significance 


SP 


Space 


STX 


Start of Text 


SUB 


Substitute 


SYN 


Synchronous Idle 


TM 


Tape dark 


UC 


Upper Case 


VT 


Vertical Tab 
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EXTENDED BINARY - CODED - DECIMAL INTERCHANGE CODE -CEBCDIO 
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M-M Packed Decimal Numbers - In the packed formats two decimal digits 
normally are placed adjacent in a byten except for the rightmost 
byte of the field. In the rightmost byte a sign is placed to the 
right of the decimal digit. The digits 0-1 have the binary en- 
coding 0000-1001. The codes 1010-1111 are invalid as digits. 
This set of codes is interpreted as sign codes with 1010-t IQlln 
1100 -i lllOn 1111 recognized as plus and with 1101 recognized as 
minus- 1100 is the preferred code for plus. The codes 0000- 
1001 are invalid as sign codes- 



M.S Zoned Decimal Nu 
represented by t 
character set. 
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The sign uses th 
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mbers - In the zoned format decimal digits are 
heir encoded form either in the ASCII or EBCDIC 
In those forms the low-order four bits of a byte 
upied by a decimal digitn and the four high order 
the zone- Zone codes are 0011 for ASCII and 

Two forms of trailing sign are supported. In 
he last byte of the number contains a sign con- 
r a plus or a minus in the appropriate binary 
n the second form the last byte contains a decimal 
-order four bits and a sign in the upper four bits- 
e same convention as for the packed decimal format- 
s are illustrated below: 
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Arithmetic is performed on operands in the packed format- In- 
structions will be provided to translate between the two formats 
and' illegal binary encoded forms will be detected. 
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IPL INSTRUCTION REPERTOIRE 
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5.3 
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The cost ef f ec t ivehess of the IPL is very sensitive to the in- 
struction set chosen for it. Consequently n this item will take 
longest to define of all itemsn and will involve many measure-, 
ments in an attempt to ensure that the optimum set is defined. 
To facilitate this effort the instruction set has been broken 
into three sub-sets comprising BDP instruc tionsn scientific 
instructions and "general" instructions. It is anticipated 
that the general .instructions will be heavily used in systems 
programming workn and quite heavily in scientific and com- 
mercial computations. 



The low-end of the IPL is typical of the NCR market-pl 
and will be used to dictate the requirement for BDP in 
flemory compactionn with byte addressability characteri 
desire to minimize cost at this end of the spectrum, 
memory-to-memory descriptor driven operations have bee 
at the present time for the low-endn while more conven 
operations have been proposed at the high-end- An eff 
in progress to merge these two approaches so that a si 
of operations will result. The governing parameters a 
of the low-endn and if necessaryn an interpretive mode 
used at the high-end to achieve the" level 5 compatibil 
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At the other end of the spectrum the high-end attrihutes {per- 
formance} will decide the final format of the scientific in- 
structions. These instructions will be simple and probably 
operate register to register to optimize performance. The 
instructions will form part of a virtual machine that will be 
emulated by a fast micro-processor at the low-end. 



The general instruction set i 
that the requirements have no 
as the scientific and BDP fie 
these instructions almost exc 
problem be researched as thor 
reason independent approaches 
viewpoints of the IPL are bei 
those divergent approaches in 
the same time statistical dat 
operating systems and compile 
validate any instruction set 



s the most difficult to derive in 
t been subject to the same analysis 
Ids. Since system code will use 
lusively it is important that the 
oughly as possible- For this 

from the low-endn and high-end 
ng maden with an aim to coalesce 
to a single instruction set. At 
a is being gathered from existing 
rs- This data will be used to 
that results. 



The overall approach is to seek a fastn register-oriented 
machine for the high-end of the line which may use cache memoriesn 
instruction stackn parallel functional unitsn etd in order 
to achieve the desired performance. The complex operations 
needed for the low-end machines will be trapped and interpretively 
executed if necessary. At the low-end a virtual machine capable 
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of being emulated by a micro-processor will be evolved such 
that memory utilization -Card consequently n overall cost} may 
b e m i n i m i y. c d . 

S-b Other virtual machines-! such as COBOL virtual machinosn will 
be permitted as long as they conform to the IPLOS interfaces 
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b. OPERATING SYSTEM 
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b.B 



b • 3 



Architectural considGrations up to this point have concen- 
trated on hardware characteristics! although the processor 
configurations and virtual memory mechanism are not without 
software inpl ica t ions . Hnwoveri one important component 
of the system architecture is the operating system! and 
this section discusses some of the basic philosophies 
leading up to its definition. 

The IPL Operating System -CIPL0SI will be developed as a 
collection of subsystems all of which are administered as 
user work. In other wordsn the system will be organized 
as a collection of intercommunicating user and system 
processesn each having different levels of capability! 
protection and security. There will be a small amount of 
coden having maximum exposure to hardware characteristics! 
which will manage inter-process messages. For purposes of 
reliability! security and measurabil ity it is desirable to 
organize system services as separate sub-systems. However! 
the resultant performance penalties appear to be unacceptable 
Consequently! the IPLOS is planned to utilize both integrated 
and seqreqated system services. Interfaces will be dermed 
such that future changes may be accomplished with a minimum 
effort. Such a measure will compromise reliability and 
security for performance. 

A single operating system based on the general multiple 
processor configuration discussed in section 2 is planned 
for all IPL models. 



b»M The virtual memory organization described in section 3 is 
required by the IPLOS to enable code and data sharing in a 
controlled environmen t imaximizing security and protection 
for the system and user alike. 

b-5 The IPLOS will organize all external I/O in an implicit 
fashion. 

b.b All IPLOS code will be written in a high level implementation 
language -CSUL>. Any use of IPL assembly language will be 
done in the context of the SUL environment! and will be kept 
to an absolute minimum. 
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